$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa File: 53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa (raw, json) Hash identifier: cOlyS2YU9gLadNvnUv8Xv/qe5IGODPTasy+OZ0+Kj1c= Subject key identifier: AD:94:E0:76:AD:F7:AF:81:29:8C:63:AA:86:EA:03:AD:A6:38:33:FE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B4A3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa Signing time: Thu 08 May 2025 16:09:52 +0000 ROA not before: Thu 08 May 2025 16:09:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137591 IP address blocks: 36.255.64.0/22 maxlen: 24 103.41.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 13:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46243 (0xb4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:09:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd74f-3c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fd:fe:e6:6c:59:3d:17:a2:02:d2:67:30:03: cf:31:30:8b:78:8a:28:6e:5d:cd:74:8f:d4:38:58: 18:f8:eb:fb:da:89:63:e9:a2:04:1b:8d:df:2d:56: 3f:f4:a4:b5:32:77:97:f9:23:00:38:1a:06:79:ee: 19:db:64:3a:f8:02:9e:3e:5c:aa:0e:8a:cc:71:82: b2:13:43:84:5f:d1:68:a1:f1:2e:35:e3:e5:d6:3b: 2d:81:e6:6b:9b:78:41:6e:36:d3:0e:be:93:3d:d8: f4:a3:8d:1c:82:81:10:b2:1f:84:9c:fa:72:12:af: 1c:68:31:1a:cb:cc:7f:4d:aa:84:84:72:4f:d2:8a: 0b:4d:a4:17:d2:2b:05:02:2c:54:21:82:05:6d:04: 4a:a6:85:b1:7b:71:92:ea:71:ce:79:4a:d2:28:51: 75:86:67:2d:96:a9:3a:ae:d1:d9:ea:f4:23:6c:eb: 0c:b4:2a:09:03:9a:fd:1d:94:c6:51:ea:53:85:39: f9:e0:bf:23:3f:88:4d:8f:fb:24:3d:af:d6:c7:e4: f9:ee:a6:33:e5:89:c4:b0:81:0e:7a:cc:c4:39:ff: cf:18:50:15:10:db:96:be:a0:dd:a0:46:fe:62:00: fe:52:f2:9b:14:14:92:6c:ea:f9:b2:8c:59:94:eb: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:94:E0:76:AD:F7:AF:81:29:8C:63:AA:86:EA:03:AD:A6:38:33:FE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.64.0/22 103.41.196.0/22 Signature Algorithm: sha256WithRSAEncryption 23:97:ce:dc:94:19:08:b0:55:76:68:bc:b1:f8:fe:b2:e6:73: cf:26:eb:cb:a8:b4:fd:5a:7e:ae:54:28:6d:be:4c:38:8d:13: 5d:68:55:9c:c9:ff:cf:b7:8d:12:59:2f:70:ed:f1:e5:4d:03: bc:5e:38:9d:e1:71:26:2a:3d:00:d4:3c:73:b1:09:bb:4a:9a: d3:2f:c7:fc:64:ef:03:9a:59:b4:4a:1b:69:88:7a:87:63:76: 28:4b:67:8b:2c:71:40:12:98:1f:35:d4:ee:0a:79:d5:61:29: ae:31:a0:36:53:f5:60:99:c3:15:36:6d:f7:47:f6:9f:7d:86: 27:b1:0e:ef:a5:c8:49:77:64:69:2e:5c:28:7c:46:20:77:4a: 47:c7:19:e0:b5:73:39:9a:15:8f:be:88:cd:0f:dd:00:cc:c8: cc:60:20:71:7b:fe:ec:be:07:dc:e9:29:3a:6a:a5:38:48:e1: 5c:43:5d:ac:c2:b6:4e:5e:18:8f:42:d9:6e:39:9e:a8:e4:8b: 06:e7:11:36:7e:31:d9:51:16:30:81:00:ca:93:b4:37:c7:67: d7:19:1c:20:1b:34:0e:6f:ba:72:e3:2c:86:93:26:50:fc:f3: db:f1:03:a0:d6:47:c6:34:3a:b5:f1:85:2c:d0:2f:47:df:83: da:d7:34:64 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALSjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDk1MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3NGYtM2MxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMf9/uZsWT0XogLSZzADzzEwi3iKKG5dzXSP1DhYGPjr+9qJY+miBBuN3y1W P/SktTJ3l/kjADgaBnnuGdtkOvgCnj5cqg6KzHGCshNDhF/RaKHxLjXj5dY7LYHm a5t4QW420w6+kz3Y9KONHIKBELIfhJz6chKvHGgxGsvMf02qhIRyT9KKC02kF9Ir BQIsVCGCBW0ESqaFsXtxkupxznlK0ihRdYZnLZapOq7R2er0I2zrDLQqCQOa/R2U xlHqU4U5+eC/Iz+ITY/7JD2v1sfk+e6mM+WJxLCBDnrMxDn/zxhQFRDblr6g3aBG /mIA/lLymxQUkmzq+bKMWZTrLQMCAwEAAaOCApswggKXMB0GA1UdDgQWBBStlOB2 rfevgSmMY6qG6gOtpjgz/jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUzRjE2QTBD RUY0RjExRUY5Q0IzQ0EzNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCJP9AAwQCZynEMA0GCSqGSIb3DQEBCwUAA4IBAQAjl87c lBkIsFV2aLyx+P6y5nPPJuvLqLT9Wn6uVChtvkw4jRNdaFWcyf/Pt40SWS9w7fHl TQO8Xjid4XEmKj0A1DxzsQm7SprTL8f8ZO8Dmlm0ShtpiHqHY3YoS2eLLHFAEpgf NdTuCnnVYSmuMaA2U/VgmcMVNm33R/affYYnsQ7vpchJd2RpLlwofEYgd0pHxxng tXM5mhWPvojND90AzMjMYCBxe/7svgfc6Sk6aqU4SOFcQ12swrZOXhiPQtluOZ6o 5IsG5xE2fjHZURYwgQDKk7Q3x2fXGRwgGzQOb7py4yyGkyZQ/PPb8QOg1kfGNDq1 8YUs0C9H34Pa1zRk -----END CERTIFICATE-----Generated at Wed May 14 17:05:43 2025 by rpki-client